Hi Jason, If you don't already know there are 3 main printer drivers for NT these are Post Script, PCL5 and PCL6 i think it is. Post Script ones are easy open it in a postscript viewer. The most established is GSView which can be found at the address below. I tried it with files on my print spool and was surprised the results, i was able to see documents with graphs and so forth. I found the .tmp files were a great source of results. http://www.cs.wisc.edu/~ghost/ In regards to Michael's suggestion about piping to a printer. Perhaps you can pipe to a printer driver like adobe distiller or fine print but haven't thought much about the practical (how to do this). Hope this helps. Daniel Heinonen At 03:34 PM 21/06/01 +0100, you wrote: >From: "Fuller, Jason" <JFullerat_private> >To: "'forensicsat_private'" ><forensicsat_private> >Subject: server spool files >Date sent: Wed, 20 Jun 2001 10:18:36 -0500 > >[ Double-click this line for list subscription options ] > >I am looking for any information on viewing saved spooled files under Win >NT Server 4.0. > >The system is running Win NT Server 4.0 SP6a. The current printer setup >up on the server shows 11 different printers were used on the network in >question. Each printer was setup to "keep documents after they have >printed" under the scheduling tab. > >Does anyone have info on viewing these files. The server creates two >files per printed document. One is a *.spl extension and the other is a >*.shd extension. > >I need to view these spooled files without having to re-print each >document. > >Thank you in advance. > >Jason
This archive was generated by hypermail 2b30 : Fri Jun 22 2001 - 14:58:13 PDT